Development record
manifest_path from version-location.json is not path-contained: validateVersionLocation only checks non-empty (unlike launch include patterns which reject .. and absolute), so editManifest can stamp a payload outside the destination. GitHub mirror: #488
issueresolvedmajoriss-2608270500214438
manifest_path from version-location.json is not path-contained: validateVersionLocation only checks non-empty (unlike launch include patterns which reject .. and absolute), so editManifest can stamp a payload outside the destination. GitHub mirror: #488
Frontmatter
| id | iss-2608270500214438 |
|---|---|
| type | issue |
| lifecycle | resolved |
| severity | major |
.abcd/work/issues/resolved/iss-2608270500214438-manifest-path-from-version-location-json.md
open on GitHub ↗ · commit history ↗